Lucene search
+L

2920 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/27 12:00 a.m.•13 views

CVE-2009-2976: Undefined Security Weakness

Cisco Aironet Lightweight Access Point AP devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network...

7.8CVSS5.9AI score0.01411EPSS
SaveExploits0References2
NVD
NVD
•added 2009/08/18 10:30 p.m.•30 views

CVE-2009-2856

Sun Virtual Desktop Infrastructure VDI 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the...

3.5CVSS6.4AI score0.0132EPSS
SaveExploits0References4
Prion
Prion
•added 2009/08/18 10:30 p.m.•28 views

Design/Logic Flaw

Sun Virtual Desktop Infrastructure VDI 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the...

3.5CVSS7AI score0.0132EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2009/08/18 12:00 a.m.•84 views

3CX Phone System login.php Multiple Parameter XSS

3CX Phone System for Windows, a software-based IP PBX, is installed on the remote host. The installed version fails to sanitize input to the 'fName' and 'fPassword' parameters in 'login.php' before using it to generate an HTML response dynamically. An unauthenticated remote attacker may be able t...

4.3CVSS5.9AI score0.01065EPSS
SaveExploits0References3
myhack58
myhack58
•added 2009/07/22 12:00 a.m.•27 views

From the webshell to sniff for linux-vulnerability warning-the black bar safety net

Special thanks to the bridge brother! Long time no get too, and forgot how to in the linux below to sniff. Get a webshell is a linux machine and want to try sniffing him within the network of the database server. So with this article! First with backshell bounce a SHELL to the local. 我 用 的 是 xi4o...

0.6AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2009/07/07 12:00 a.m.•30 views

StarDict Information Disclosure Vulnerability (Linux)

This host is installed with StarDict and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: gbstardictinfodiscvulnlin.nasl 4869 2016-12-29 11:01:45Z teissa $ StarDict Information Disclosure Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbo...

5CVSS6.4AI score0.02432EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2009/07/07 12:00 a.m.•55 views

StarDict Information Disclosure Vulnerability - Linux

StarDict is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.1AI score0.02432EPSS
SaveExploits0References4
NVD
NVD
•added 2009/07/05 4:30 p.m.•22 views

CVE-2009-2319

The default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

5CVSS6.1AI score0.00654EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/05 12:00 a.m.•9 views

CVE-2009-2319: Undefined Security Weakness

The default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

5CVSS5.8AI score0.00654EPSS
SaveExploits0References2
NVD
NVD
•added 2009/07/01 1:00 p.m.•36 views

CVE-2009-2272

The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by 1 reading a cookie file, by 2 sniffing the network for HTTP headers, and possibly by using unspecified other vectors...

7.5CVSS7.5AI score0.00644EPSS
SaveExploits0References1
NVD
NVD
•added 2009/07/01 1:00 p.m.•28 views

CVE-2009-2273

The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

5CVSS6.2AI score0.0066EPSS
SaveExploits0References1
Prion
Prion
•added 2009/07/01 1:00 p.m.•29 views

Design/Logic Flaw

The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by 1 reading a cookie file, by 2 sniffing the network for HTTP headers, and possibly by using unspecified other vectors...

5CVSS6.9AI score0.00644EPSS
SaveExploits0References1
Prion
Prion
•added 2009/07/01 1:00 p.m.•33 views

Default configuration

The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

5CVSS6.7AI score0.0066EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2009/07/01 12:26 p.m.•36 views

CVE-2009-2272

The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by 1 reading a cookie file, by 2 sniffing the network for HTTP headers, and possibly by using unspecified other vectors...

7.5AI score0.00644EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2009/07/01 12:00 a.m.•21 views

PT-2009-4708 · Huawei · Huawei D100

Name of the Vulnerable Software and Affected Versions: Huawei D100 affected versions not specified Description: The issue allows context-dependent attackers to obtain sensitive information, specifically the administrator's account name and password, which are stored in cleartext in a cookie...

7.5CVSS7.4AI score0.00644EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/01 12:00 a.m.•8 views

CVE-2009-2273: Use of a Broken or Risky Cryptographic Algorithm

The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

5CVSS5.8AI score0.0066EPSS
SaveExploits0References2
NVD
NVD
•added 2009/06/30 10:30 a.m.•33 views

CVE-2009-2260

stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network...

5CVSS6AI score0.02432EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2009/06/30 10:30 a.m.•27 views

CVE-2009-2260

stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network...

5CVSS5.9AI score0.02432EPSS
SaveExploits0References1
CVE
CVE
•added 2009/06/30 10:00 a.m.•66 views

CVE-2009-2260

The CVE-2009-2260 entry concerns StarDict 3.0.1 where, when Net Dict is enabled, the program sends clipboard contents to a dictionary server, enabling information disclosure. The connected sources (OSV and security/plugin records) confirm this is an information-exposure vulnerability in StarDict ...

5CVSS6AI score0.02432EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2009/06/30 10:00 a.m.•38 views

CVE-2009-2260

stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network...

5.9AI score0.02432EPSS
SaveExploits0References3
Rows per page
Query Builder